Network Security

Hi All, On one of our Cisco ASA 5525 we are having OS of  asa912-smp-k8.bin , but  it has a BUG Related to OPEN SSH,  BUG ID: CSCul78967 and CVE ID: CVE-2008-5161, Bug Tool Shows no work around for this please share your inputs on this!!!! https://to...

Has someone written a document or best practice white paper to prevent DoS attack on ASA. What commands should be configured to prevent it etc. Thanks in advance for any help.

Hi All, We are having issues to place video calls, using an external h323 Gateway. The call is dropped every minute and no video is displaying, only audio is working. This is a new implementation to use a Video Application to make video conference......

Hi all I am planing to upgrade our asa5505 software to the new version (9.2). Currently we are running 8.2 and some boxes are running 8.4. I have read that I have to reconfigure the NAT part in order to make it work on 9.2 Are there anything else tha...

Hello All, I'm hoping for some help in debugging a problem with the syslogs from our ASA device.  We're missing data.  A _lot_ of data.  I'll say up front that I am not the administrator of the ASA device (I'm the consumer of the log data) but our lo...

Hi All I have a Cisco ASA 5550 that already has 4 physical interfaces used which includes the use of 8 redundant interfaces under redudant1. I am planning on using some of the spare physical interfaces shortly but wanted to use redundant interfaces a...

Hi,We have a 5540 firewall, when we push up a firewall rule one step we get a message from ASDM that this cannot be done. See file included?Why is this, I did never see this problem. We use a lot of ASA's including 5550 and 5580's.ASA image is 8.4(1)...

Hello, I cannot remove the Maximum Other VPN Sessions on my ASA. It i fixed to 250 but my license is to 2500 Other VPN Peers. When I remove with the commande :  no max-other-vpn-limit 250 It is the Ipsec  VPN site to site who are impacted. But my req...

Hi,I was wondering with a single ASA is there a way to have multiple contexts use a dual ISP? For example context A has an inside and an outside(A) with another outside(B) for failover. Context B has and inside, and outside (B) and another outside (A...

So just to set a correct picture, we have the firewall running and can create a single port PAT translation that works just as expected. .What we can't seem to get right is the way to open a range. We are replacing an older linksys device and this on...

Hello all. My customer would like to purchase UCSE blades on their ISRG2 4431 routers for their branch offices. They would like to run the Firepower NGIPSv VMs on it. My question is - Is there a way that the NGIPSv can drop traffic inline (IPS mode) ...

The Sourecfire website used to have a knowledgebase where I could go look up issues that other individuals encountered and the resolution for them.  Does Cisco have something similar to that?  I can't seem to find it on the support website and I don'...

I'm having issues with getting SIP and RTP traffic through a Cisco ASA with NAT enabled. Diagram of issue: http://i.imgur.com/Ymwl7Xm.jpgNow, when we enable the SIP inspection on the ASA, the SIP messages are generated by "SIP CLIENT" and when genera...

How do you make sure you’re selecting an NGFW that reduces opportunities for thieves across the full attack continuum – before, during, and after an attack?Marc Solomon, VP of Cisco Security Marketing has some thoughts on this topic.Read the Security...